Stan Grishin [Sat, 4 Feb 2017 13:25:10 +0000 (05:25 -0800)]
vpnbypass: HOTFIX no longer incorrectly stopping service/reliable start
fixed: stop function used to kill the hotplug file
fixed: despite ubus wait_for network.interface.wan and WAN-IF hotplug, sometimes we'd get no WAN ip on start
rng-tools: start rngd early enough to actually be useful
lighttpd starts at priority 50, but promptly calls getrandom() on
initialization (li_rand_reseed() and li_rand_device_bytes() from
server_init()). If /dev/urandom (which getrandom() uses by default)
doesn't have sufficient entropy, this will block.
Since Openwrt runs the startup scripts serially, this can block
initialization indefinitely. I've seen 15-20 minutes typically.
Seeding the pool early on can quickly built sufficient entropy to
complete booting without blocking.
lang/python-pcapy: Bumped version to 0.11.1 Signed-off-by: Andrew McConachie <redacted>
Compile tested: AMD64
Run tested: tested
Description: new release
Val Kulkov [Wed, 1 Feb 2017 05:25:57 +0000 (00:25 -0500)]
nginx: update to 1.10.3, add new module options
Update nginx to version 1.10.3.
Add new configuration options to enable the following optional
modules (disabled by default):
- http_auth_request_module
- http_v2_module
- http_realip_module
- http_secure_link_module
Stan Grishin [Mon, 23 Jan 2017 16:02:44 +0000 (08:02 -0800)]
vpnbypass: initial commit
Signed-off-by: Stan Grishin <redacted>
vpnbypass: fixed renamed option in stop_service
Signed-off-by: Stan Grishin <redacted>
vpnbypass: fixed typo in makefile, switch FW_MARK to 0x010000 to play nice with SQM/mwan (thanks Hannu)
Signed-off-by: Stan Grishin <redacted>
vpnbypass: proper masking in setting mark
Signed-off-by: Stan Grishin <redacted>
vpnbypass: separating luci-app-vpnbypass into different tree
Signed-off-by: Stan Grishin <redacted>
vpnbypass: fixed incorrect use of procd_add_reload_interface_trigger according to http://wiki.prplfoundation.org/wiki/Procd_reference
While fixing up some incorrect STAGING_DIR_HOSTPKG uses I introduced, I
noticed that the LIBPNG12_CONFIG variable is not used by libgd anymore (it
is called LIBPNG_CONFIG now).
As the build runs fine without setting LIBPNG_CONFIG, let's just remove the
unused line.
Dirk Brenken [Mon, 23 Jan 2017 18:03:41 +0000 (19:03 +0100)]
adblock: update 2.1.5
* fix init boot function
* made fetch utility check more bullet proof
* automatically switch between default wget & uclient-fetch
configuration
* output link to online documentation on error
* update documentation
Eric Luehrsen [Thu, 29 Dec 2016 06:32:31 +0000 (01:32 -0500)]
unbound: expand UCI to cover some popular dnsmasq features
Unbound+DHCP (server of your choice) should be able to replicate
a lot of what dnsmasq provides. With this change set Unbound
still works with dnsmasq, but also it can work with a plain
DHCP server. Features have been added within the UCI itself
to act like dnsmasq.
- alone: name each interface relative to router hostname
- alone: prevent upstream leakage of your domain and '.local'
- dnsmasq: use dnsmasq UCI to configure forwarding clauses
- dhcp: work with odhcpd as example of companion DHCP-DNS
- dhcp: convert DHCPv4 leases into EUI64 SLAAC for DNS records
- all: enable encrypted remote unbound-control using splice conf
- all: allow user spliced conf-files for hybrid UCI and manual conf
-- 'unbound_srv.conf' will be spliced into the 'server:' clause
-- 'unbound_ext.conf' will add clauses to the end, example 'forward:'
README HOW TO for dnsmasq-in-serial, dnsmasq-in-parallel, and
unbound-with-odhcpd have better/added UCI starters. HOW TO for
including unbound_srv.conf and unbound_ext.conf are added.
Document new UCI: add_local_fqdn, add_wan_fqdn, dhcp4_slaac6,
dhcp_link, domain, and domain_type
Eric Luehrsen [Sat, 7 Jan 2017 19:19:22 +0000 (14:19 -0500)]
unbound: expand UCI support for odhcpd DHCP-DNS
This is bare minimum change in 'unbound.sh' and
'dnsmasq.sh' to migrate the UCI option set for
more flexibility. The boolean(s) to link to
dnsmasq are being changed to a state to include
odhcpd. It is executable but a small step for
clear change management.
Eric Luehrsen [Thu, 29 Dec 2016 06:29:17 +0000 (01:29 -0500)]
unbound: add odhcpd specific scripts to link DHCP-DNS
The UCI for Unbound already links to dnsmasq, but what
if with Unbound, we want to configure a plain dhcp server.
Most servers can call a script for lease events. That
script can then formulate DNS records and load them
with unbound-control (dependency).
The files added here work with OpenWRT/LEDE odhcpd, such
that it can be run alone. They can be used as examples
for any dhcp server. 'odhcpd.sh' is to be called by
odhcpd when a lease event occurs. 'odhcpd.awk' is called
internal to the shell script. The awk script handles
any tricky reformating that may be required.
Eric Luehrsen [Fri, 23 Dec 2016 07:37:21 +0000 (02:37 -0500)]
unbound: improve NTP hotplug behavior when Unbound is disabled
If Unbound was disabled and at later time enabled, then it
would operate in DNSSEC less-secure mode. When NTP hotplug
was called, the timestamp file was not updated. This was
found testing Unbound vs other tools (bind, dnsmasq).
git.99rst.org / openwrt-packages.git / log